Bill
Bill > SB546
OK SB546
OK SB546Data privacy; establishing consumer rights; appeal process; privacy notice; data protection assessments; penalties; liability. Effective date.
summary
Introduced
02/03/2025
02/03/2025
In Committee
04/24/2025
04/24/2025
Crossed Over
03/27/2025
03/27/2025
Passed
Dead
Introduced Session
2025 Regular Session
Bill Summary
An Act relating to data privacy; defining terms; establishing consumer rights for processing of certain data; requiring compliance with certain consumer requests; establishing procedures for response to certain consumer requests; requiring establishment of certain appeal process; prohibiting certain contractual provisions; requiring establishment of methods for submission of certain consumer requests; establishing duties of controller; prohibiting controller from taking certain actions; providing exceptions; requiring privacy notice; specifying required contents in privacy notice; requiring certain disclosures; establishing duties of processor; establishing requirements for certain contracts; authorizing use of independent assessor under certain circumstances; requiring data protection assessments under certain circumstances; establishing requirements for data protection assessments; requiring availability of data protection assessments to Attorney General upon request; providing for confidentiality of data protection assessments; specifying applicability of requirements for data protection assessments; requiring controller in possession of certain data to take certain actions; providing enforcement authority to the Attorney General; requiring posting of certain information on Attorney General website; requiring notice of certain action; requiring certain period to cure violations before bringing certain action; providing penalties for certain violations; authorizing award of certain fees and expenses; providing for applicability of provisions; providing exceptions to applicability of provisions; exempting certain information; providing for compliance under certain circumstances; providing construing provisions; authorizing processing of personal data for certain purposes; prohibiting violation of evidentiary privileges; clarifying certain liability; limiting authorized purposes for processing of certain data; providing for codification; and providing an effective date.
AI Summary
This bill establishes consumer data privacy rights in Oklahoma, granting individuals the right to access, correct, delete, and obtain a portable copy of their personal data, as well as to opt out of targeted advertising, the sale of their data, and profiling that leads to significant decisions. Businesses, referred to as "controllers" (those determining the purpose and means of data processing) and "processors" (those processing data on behalf of controllers), must comply with these requests within a specified timeframe, provide an appeal process for denied requests, and establish secure methods for consumers to submit their requests. Controllers are required to provide a clear privacy notice detailing their data processing practices and must implement reasonable data security measures, limiting data collection to what is necessary and avoiding discriminatory practices or processing sensitive data without consent. The bill also mandates data protection assessments for certain high-risk processing activities, such as targeted advertising and the sale of personal data, and outlines penalties for violations, with enforcement solely by the Attorney General, who must provide a notice and opportunity to cure violations before taking action, and sets a civil penalty of up to $7,500 per violation, with no private right of action allowed. The act applies to controllers and processors meeting specific thresholds related to the volume of data processed or revenue from data sales, and includes various exemptions for entities like government agencies, financial institutions, healthcare providers, non-profits, and educational institutions, as well as for certain types of data like protected health information and research data.
Committee Categories
Business and Industry, Government Affairs, Transportation and Infrastructure
Sponsors (7)
Brent Howard (R)*,
Josh West (R)*,
Arturo Alonso-Sandoval (D),
Nick Archer (R),
Daniel Pae (R),
Melissa Provenzano (D),
John Waldron (D),
Last Action
Coauthored by Representative Alonso-Sandoval (on 02/23/2026)
Official Document
bill text
bill summary
Loading...
bill summary
Loading...
bill summary
Loading...